CVE-2026-107819

A flaw was found in MariaDB Connector/C. During automatic Transport Layer Security (TLS) connection setup, the library verifies certificate trust but fails to confirm that the server hostname matches the certificate before switching authentication methods. An active man-in-the-middle (MitM) attacker with a valid certificate for a different domain can exploit this vulnerability to intercept the encrypted connection, request plaintext authentication, and capture database passwords.

This vulnerability is evaluated as a Moderate impact because exploitation demands an active man-in-the-middle network position as well as a valid, trusted TLS certificate for an alternate domain. When client applications rely on libmariadb automatic SSL configuration, omitting hostname validation allows an interception proxy to solicit unhashed password authentication. Earlier enterprise versions, such as those in Red Hat Enterprise Linux 8 and 9, predate the addition of this zero-configuration functionality and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.